ch6, securing the POST complete